Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2026-1209 Medium 5.3

When curl is told to use the Certificate Status Request TLS extension, often referred to as *OCSP...

JLSEC Published
Modified
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Packages
CURL_jll >= 8.17.0+0, < 8.20.0+0
LibCURL_jll >= 8.17.0+0, < 8.20.0+0

When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it fails to detect OCSP problems and instead wrongly consider the response as fine.

References